The vulnerability of the Data Store component of the Oracle Berkeley DB database management system allows a hacker to gain full control over the system.

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the system...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to cause the system to freeze or partially fail to operate.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or partially fail to operate...

Open edX platform security feature issue vulnerability

The Open edX platform is an open source course management system CMS. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. A security feature issue vulnerability exists in the installation process in versions of Open edX prior to 2017-01-10...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data, or to cause service failures.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions...

The vulnerability of the REST API implementation of the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to the root level.

The vulnerability of the REST API implementation of the Cisco Application Policy Infrastructure Controller relates to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to root level by downloading maliciou...

The vulnerability of the installation mechanism for the software set for developing Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, stems from deficiencies in access control within the certification database. This allows attackers to disclose protected information.

The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, is related to deficiencies in access control within the certification database. Exploiting this vulnerability could allow attackers to disclose protected information...

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Intel Converged Security and Management Engine, Server Platform Services and Trusted Execution Engine HECI subsystem privilege permission and access control issue vulnerability

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine.Intel Server Platform Services SPS is a server platform service program.Intel Trusted Execution Engine is a trusted execution...

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in their lack of access control mechanisms. This allows attackers to carry out cross-site scripting attacks and increase their privileges.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and increase their privileges by using a specially crafted...

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to root level.

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller information infrastructure is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the Agent component of the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, allows a hacker to gain access to protected information.

The vulnerability of the Agent component in the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, is related to deficiencies in access control to named communication channels. Exploiting this vulnerability can allow attackers to gain access to information about user...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation solution, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

ATutor file_manager Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ATutor %q This module allows the user to run commands on the server with teacher user privilege. The 'Upload files' section in the 'File Manager'...

The vulnerability of the Kernel Mode Driver component of the Intel Graphics Driver allows a hacker to execute arbitrary code.

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...